Challenging Security Assumptions in Open Source and Why it Matters
blog.whitehatsec.com